[ Search ] [ What's New? ] [ About ]
[ Bugs ] [ Misc ] [ Mailing Lists ] [ Newgroups ] [ NewsWire ] [ Papers ] [ People ]
[ Pictures ] [ Publications ] [ Responce Teams ] [ Tools ] [ Upcoming Events ] [ Web Sites ]

colorvew(1)
Systems Affected:IRIX 5.1 and 5.2
Problem: /usr/sbin/colorview is setuid root and can be used to read any file in the system. Example, to view the admins mail: 

	/usr/sbin/colorview -text /var/spool/mail/admin

Solution:Turn the suid bit off.

Aleph One / aleph1@underground.org
Copyright © 1996 Computer Underground Society. All rights reserved.